Data protection
Datenschutz
Data protection is a matter of trust and your trust is important to us. The data processing of Gebr. Tonsor OHG (hereinafter referred to as Gebr. Tonsor), represented by Andreas and Beatrice Tonsor, is based on the statutory provisions.
Your information
This data usage notice informs visitors and customers who conclude contracts on our website about the collection, processing and use of data when visiting, registering and concluding a contract, as well as about objection, cancellation and other rights to which you are entitled as a person affected by the collection and use of data.
The following linked headings should make it easier for you to access the desired information.
- General information
- Notes on the use of data
- I. Use of your personal data
- 1. What is personal data?
- 2. Use of data for contract processing
- a Establishing contact, contract initiation and processing
- b Consents
- c Cancellation option
- 3. Processing in the company organisation
- a Transmission to third parties
- b Outsourced IT and hosting
- 4. Transmission to payment service providers
- 5. Shipping status information
- 6. Use of data for advertising and market research purposes
- 7. Right of cancellation and objection to advertising
- 8. Use of data in your application
- 9. Cancellation and blocking
- II. Data collection when visiting our pages
- 1. Technical information and cookies
- 2. Use of profiles
- 3. Details on web analytics and advertising (Google Analytics, Google Maps)
- 4. Right of objection and cancellation for user profiles and cookies
- III. How do we protect your personal data?
- 1. Allgemeine Schutzmaßnahmen
- 2. Schutz Ihrer Zahlungsdaten
- IV. What rights do I have?
- 1. Right to confirmation and information
- 2. Right to rectification
- 3. Right of objection
- 4. Right to erasure (right to be forgotten)
- a Requirements for cancellation
- b Further right to be forgotten
- c Exceptions to cancellation
- 5. Right to restriction of processing
- 6. Right to data portability
- 7. Assertion of your rights
- V. What consents have I given?
The following information applies to the use of the Gebr.Tonsor website, including the online shop. Users within the meaning of this agreement are visitors to our site who use the website, the functions or the content offered, even if this is done without registration. Every user can navigate our website free of charge and without providing their name or other identifying information, even without registering or logging in.
1. What is personal data?
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). A name is not necessarily required for identifiability. Indirect identifiability is also sufficient, e.g. by means of assignment to an identification number, to location data, to an online identifier or to one or more special characteristics. It is therefore about your identity. This includes, for example, your name, but also your telephone number, your address and other data that you provide to us.
Many of the legal bases for our data processing can be found in the European General Data Protection Regulation (GDPR), the text of which and the associated recitals can be found athttps://dsgvo-gesetz.de. In the following information, we refer to the relevant regulations as the respective legal basis for our processing.
2. Use of data for contract processing
a) Establishing contact, contract initiation and processing
If you contact us via our contact options (e.g. via e-mail or contact form), we will store your name and contact details as well as your request. The data will be used to process your request and to communicate with you. We use your e-mail to be able to reply to you by e-mail (legal basis Art. 6 para. 1 sentence 1 a and b GDPR). For questions about specific orders or if you want us to do something for you personally, we need your real name. For other questions, you can also enter a pseudonym. Once your request has been finally resolved and there are no other retention obligations or registration, the data will be deleted.
Tonsor collects, uses and processes your data to provide you with relevant information, such as search results, new content and functionalities and to answer your service enquiries.
In addition, data is used for the preparation of offers and orders (your address, delivery address if applicable, e-mail address and payment processing data). In this case, your details are required, as otherwise no contracts can be concluded with Tonsor Bros.
In connection with the shop, Gebr.Tonsor keeps data on transactions available to you as a user for convenient tracking and control in the customer account area (accessible after registration via „Login“).
In addition, commercial and tax law obliges us to archive data from concluded transactions for the duration of the statutory retention periods. The legal basis for the corresponding use of data is Art. 6 para. 1 lt. c GDPR.
b) Consents
Tonsor requires consent from users who conclude contracts in the shop for certain cases, without which Tonsor or the partners used to provide the services cannot provide the services offered. Tonsor has compiled the consents provided for this purpose for the user in the provisions of VII. of the Shop Terms of Use, which the user grants by accepting the Shop Terms of Use. The legal basis for the processing is Art. 6 para. 1 lt. a and b GDPR.
In addition to these necessary consents, Gebr.Tonsor may ask you to give further consents outside these shop terms of use, e.g. in order to be allowed to send advertising information by e-mail or to be able to provide services in the future as part of new or expanded services. The legal basis for this processing based on your separate consent is Art. 6 para. 1 lt. a GDPR.
c) Cancellation option
All consents granted by the user with the separate acceptance of the shop terms of use can be revoked by the user with effect for the future. Data usage prior to the revocation remains unaffected. However, revocation may result in the user no longer being able to use the services offered by Gebr.Tonsor, particularly in the shop. In particular, a revocation of consent entitles Gebr.Tonsor to stop the execution of the contract if necessary, to make further execution dependent on proof of identity and/or advance payments if necessary and to exclude the user from further participation in the shop or, in the case of a registered user, to terminate the customer relationship.
A cancellation can be declared to Gebr.Tonsor in all cases. The user can also send their declaration of cancellation to the company benefiting from the consent.
3. Processing in the company organisation
a) Transmission to third parties
As part of our corporate organisation, Gebr.Tonsor processes your data in IT systems operated by and service providers and, if necessary, transmits data of customers, interested parties, suppliers and personnel to authorities such as tax authorities and consultants (tax consultants, lawyers, auditors) in accordance with the interests of Gebr.Tonsor in legally compliant and economic corporate management (legal basis Art. 6 para. 1 lt. c and f GDPR).
In this context, Gebr.Tonsor analyses data on all company and business transactions for corporate management and market research purposes. Insofar as no other necessity arises from the specific purpose, the data is largely anonymised or at least evaluated pseudonymously and, if necessary, made accessible to third parties in summarised form, detached from persons. Legal basis Art. 6 para. 1 lt. c and f GDPR.
b) Outsourced IT and hosting
Gebr.Tonsor uses individual IT software and hosting services from service providers as part of the provision of services and the fulfilment of your requests and our contractual obligations on the basis of our interests in efficient and secure company and contract execution. Your data on your interests, concerns, orders and visits or perceptions of our services are also processed with the help of the services of these service providers.
Where required by law and not already protected by professional secrecy regulations, Gebr.Tonsor has contractually secured its access and the secure and confidential handling of your data in order processing cases. Legal basis Art. 6 para. 1 lt. f GDPR possibly in conjunction with Art. 28 GDPR (conclusion of order processing contract).
4. Transmission to payment service providers
In agreement with the companies that process payments with payment cards, credit card data is not stored at Gebr.Tonsor. Instead, this data is entered directly on the website of our payment service provider Concardis GmbH (Concardis), Helfmann Park 7, D-65760 Eschborn via a secure gateway on the basis of a secure, encrypted procedure. Only in the case of returns does Gebr.Tonsor have to transmit data to the payment service provider for refunds. This is data about the credit card holder and the transaction (first name, surname, internal payment ID, amount).
All payment data and data on any chargebacks will only be stored for as long as they are required for payment processing (including the processing of possible chargebacks and debt collection) and to combat misuse. As a rule, the data is deleted no later than 13 months after it is collected.
In addition, further storage may take place if and as long as this is necessary to comply with a statutory retention period or to prosecute a specific case of misuse. The legal basis for data processing is Art. 6 para. 1 lt. f GDPR.
You can request information and, if necessary, correction or deletion as well as the restriction of the processing of your data and/or, if necessary, the Object to the processing of your data. If you have any questions about data processing by Concardis or to assert your aforementioned rights, you can contact the data protection officer at the address provided or by e-mail at Datenschutzbeauftragter@concardis.com.
Furthermore, you have the right to complain to a supervisory authority (in Germany, to the state data protection officers). We point out that the provision of payment data is neither required by law nor by contract. If you do not want to provide your payment data, you can use another payment method (e.g. cash payment).
5. Shipping status information
The respective shipping service provider used to deliver the goods ordered on Gebr.Tonsor transmits data about the status of the shipment to Gebr.Tonsor. Gebr.Tonsor uses this data to check the delivery. The user's consent to this is also provided for in the shop terms of use.
6. Data use for advertising and market research purposes
Gebr.Tonsor is interested in maintaining the customer relationship with you, gaining new customers, reactivating old customers and providing its customers with information and offers. To safeguard these legitimate interests, Gebr.Tonsor processes your data on the basis of Art. 6 Para. 1 lt. f of the GDPR (also with the help of service providers) in order to provide you with information and offers from Gebr.Tonsor and to improve its information and offers.
We use your first and last name, your postal address and - if we have received this additional information from you - your title, academic degree, your date of birth and your job, industry or business name to send you offers and information about our company and our services and products by post.
7. Right of revocation and objection to advertising
Of course, you can object to the use of your data for advertising purposes at any time - even if this use is legally permitted without your consent - by sending an informal message to Gebr.Tonsor or revoke your consent. Objection and revocation each effect a stop to future use. Uses prior to the assertion of your right remain unaffected. Of course, we do not charge any separate costs for an objection or revocation. Simply address your objection or revocation to one of the contact options listed at the end of this notice.
Your options for objection also extend to profiling (see II. point 2 for the term) and the use of data collected during the data collection when visiting our websites for direct marketing purposes. We will explain the technical options for exercising the right of objection and preventing data collection in detail in the information on the web tools used under II. Point 3. "Details on web analysis and advertising". If you exercise your right to object, we will no longer process the collected data for these purposes.
Further information on your rights can be found under IV. What rights do I have
8. Data usage for your application
If you apply to us, we will use and transmit the data you provide for the purpose of assessing your application documents and, if necessary, for carrying out the further application process (legal basis Art. 88 GDPR in conjunction with Section 26 (1) sentence 1 BDSG). An automated addition of your data from other sources (e.g. from social networks, credit reports) does not take place.
We store your data for the duration of the application process and for a maximum of six months after notification of a binding decision on your application, unless an employment contract is concluded. Otherwise, longer storage will only take place with your express consent (legal basis Art. 6 I lt. a GDPR), insofar as we have to comply with a legal requirement (legal basis Art. 6 I lt. c GDPR) or if there are legitimate reasons, e.g. if claims are made against the rejection of your application (legal basis here too Art. 6 Para. 1 Clause 1 lt. b GDPR). After the period has expired, your data will be deleted or only stored in archive systems without direct access options, as required by law, for commercial and tax archiving purposes.
9. Deletion and blocking
Your personal data will be stored until the stated purposes have been achieved or as long as we have a legitimate interest in storing it.
This will then be deleted unless otherwise agreed with you or there are statutory archiving obligations (e.g. due to commercial or tax law). In the case of legally required archiving, the data will be blocked for other access. These documents are deleted and destroyed in accordance with data protection regulations after the expiry of the statutory retention periods as part of regular campaigns.
If you have consented to the collection, processing and use of your data, we will store and use your data indefinitely until revoked or the purpose for which you gave your consent ceases to apply. The consent and processing data will then be archived until the statute of limitations (usually three years) for legal defense purposes (legal basis Art. 17 Para. 3 lt. e GDPR).
If you no longer wish to receive advertising from us, we will use your name, address and, if applicable, email address for the purpose of blocking in corresponding lists with which we compare our advertising measures so that you no longer receive any further advertising. Deleting in this sense therefore initially means that your data is blocked in our systems, in particular for advertising and marketing activities (legal basis Art. 6 Para. 1 lt. f GDPR). The data will - if necessary - continue to be processed for purposes other than advertising, such as contract processing and any warranty claims as well as commercial and tax documentation (legal basis Art. 6 Para. 1 lt. b and c GDPR).
If, despite the possible consequence in individual cases that you may continue to receive advertising, you would like your data to be deleted instead of blocked, please let us know.
At your request, we can block personal data in whole or in part. Please let us know the extent and, if applicable, the duration of the blocking. If technically possible, you can completely or temporarily exclude the processing and use of your data for certain areas in this way.
II. Data collection when visiting our website
Technical information and cookies
- You can visit our site without providing any personal information. When you visit our websites, even if this happens, for example, via a link in a newsletter or an advertisement, certain data is still recorded and stored in so-called log files. Even if the visit is made via ad links on the Internet, only access data without direct personal reference is recorded, e.g.
- the website from which we are visited
- the page that is called up or the name of a requested file
- the name of your Internet service provider
- type and version of your browser,
- time and date of access
- the operating system used on which the browser is running
- the Internet address of the accessing party (IP address)
- products and content that the visitor is interested in and the nature of the interest, such as duration, frequency, interaction with forms, navigation elements and links
It is not possible for us to draw any conclusions about your person based on this data and a combination of the above data with your personal data will also not be carried out without your consent, unless it concerns the prosecution of legal violations and attacks on our systems.
In addition, we have tried to ensure that the IP address is truncated accordingly so that certain partners who collect this IP address as part of their services make it difficult or almost impossible to trace it back to your person.
If we integrate third-party content on our website (e.g. embedded films or other information), they will only receive your IP address for this purpose, as otherwise the content cannot be delivered to your browser.
We use so-called cookies on our website. Cookies are small files that are stored on your device and that store certain settings and data for exchange with our system or the systems of service providers via your browser. This storage helps us to design the website accordingly for you and makes it easier for you to use it, for example by saving certain entries you have made so that you do not have to repeat them constantly. For this purpose, cookies usually contain identification features. This allows users and/or browsers (software for displaying Internet content) to be identified and differentiated from other users and browsers and to be recognized again during visits.
Many cookies are automatically deleted from your hard drive at the end of the browser session (end of the session) (hence also session cookies). However, there are also cookies that remain permanently stored on your computer. The expiry time is set for a point in the future for your convenience. The next time you visit, it will automatically be recognized that you have already been with us and which entries and settings you prefer. (so-called long-term cookies). Some of these cookies are used to display information specifically tailored to your interests on our website.
(Consent-free cookies)
Cookies that guarantee functions without which you could not use this website as intended are only used by us and their content is not made accessible to third parties. We use such consent-free cookies on the basis of Art. 6 Para. 1 lit. b GDPR.
The cookies are deleted at the end of the session.
(Other cookies)
For other cookies, there is already a reference to this data protection notice when you visit our website. You may consent to the use of these cookies or you use the option to deactivate data collection, e.g. with Google Analytics.
Your technical options for objection
Regardless of the set duration, you can manually delete cookies in your browser. In some browser settings, the acceptance of cookies is preset without restrictions. You can allow or prohibit temporary and stored cookies independently of each other in the security settings of your browser. Apart from the browser setting, which generally deactivates the automatic setting of cookies, you can also deactivate cookies by setting your browser so that cookies from a specific domain, e.g. "googleadservices.com" are blocked. This setting then prevents the execution of corresponding services that set cookies from this domain.
Some web services work with opt-out cookies. A web analysis service then recognizes from the cookie you set (hereinafter referred to as the "blocking cookie") that you do not want any data to be collected. We have listed separately the options for setting a blocking cookie for the web services we use under II. Number 3. Google allows e.g. corresponding settings under https://myaccount.google.com/intro. You can find options for making advertising settings for numerous other networks at http://www.youronlinechoices.com/de/praferenzmanagement/ or you can find information at http://optout.aboutads.info/ and or http://optout.networkadvertising.org find out about many advertising measures and deselect them.
If you are using a mobile device, you can activate the "No ad tracking" (iOS) or "Deactivate personalized advertising" (Android) setting on the device with the corresponding operating system. This is intended to prevent the advertising ID (a non-personal device identifier) from being used to provide interest-based advertising.
If you use the option in your browser to delete all cookies or set blocking cookies, remember that you may have to make the corresponding settings or set blocking cookies again!
Accepting cookies is not a prerequisite for visiting our website. However, if you do not accept or deactivate cookies, certain options (e.g. services such as favorites list and information) may not be available to you on our site and some websites may not be displayed correctly.
If you want to conclude contracts with us, you must accept certain cookies. If you do not want this, then no contract can be concluded.
Further information on the use of cookies can be found on the website of the Federal Association of the Digital Economy (BVDW) e.V. http://www.meine-cookies.org
If you do not want cookies to be used, you can exercise your rights to do so by technical means, which we have explained to you under II. Point 1. b) "Your technical options for objection" or for special cookies, please read our information under II. Point 3.
2. Use of profiles
The law refers to the creation of automated data collections about a person as profiling. According to Art. 4 No. 4 GDPR, profiling is any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, to analyze or predict health, personal preferences, interests, reliability, behavior, location or change of location of this natural person.
Like others, we use profiles that we create from your purchasing and usage behavior. Under no circumstances do we derive decisions from this that could be detrimental to you.
On the one hand, we base this on our interest in tailoring our offer to your needs in the best possible way and optimizing it from a business perspective (legal basis Art. 6 Para. 1 lt. f GDPR). The evaluations help us to optimize the relevance of our advertising efforts, to provide more targeted information about our company and our offers, to better manage resources and to adapt our information offering in the best possible way and to make it more relevant. With our advertising measures, we also pursue the interest of protecting you from unwanted or irrelevant advertising as much as possible.
For this purpose, we include data in the selection of the information presented to you that you know that we know. This is e.g. about your transactions on our website, e.g. for sample orders or orders in the shop and, if applicable, the reason for the purchase (advertising, campaigns, recommendations), your requests for information, information already transmitted to you or your reactions to corresponding advertising information on postal advertising and e-mail information (see also our information there under I. Point 7). In addition, we use recognizable interests from your access to our information offers on the Internet, even across different devices, such as e.g. your usage data with regard to our content and offers when using a PC, smartphone or tablet.
Where this is technically and economically sensible to pursue the purposes, we separate corresponding data from your person in order to protect your interests, pseudonymize it and form groups (clusters) before an evaluation, in which the individual information is merged.
Without your separate consent, the data will be evaluated in the interests of the aforementioned interests after extensive pseudonymization or anonymization, which no longer allows us to draw any conclusions about your person, so that we can use market research and advertising to improve our information, offers and their presentation can.
In order to be able to take your personal interests into account in a targeted manner, we also use the aforementioned purchasing and usage data if you have given your consent in the context of personal evaluations and create corresponding profiles for this purpose, the data content of which is individually tailored to your person and assigned to your person .
In this case, the assignment to your person takes place when you log in using your email address or your user name. You can find the duration of the storage and use of the assignments to certain groups (e.g. visitors who have responded to certain advertising) recorded as part of our online activities in our explanations on cookies.
Otherwise, the processing takes place until the consent is revoked or there is an objection to the processing.
To delete the data if consent has been given, please also note our information in I. Point 10.
We use appropriate web analysis tools to analyze user behavior. You can find out more below under "Details on web analysis and advertising".
You can also object to the creation of user profiles with personal data and the further use of the profile data for advertising purposes and revoke your consent to this (see I. Point 7). The exercise of the right to object to profiling by web analysis and advertising measures - insofar as these work with personal data - takes place through technical measures, which we have explained to you above under II. Point 1 b) in general and below under II. Point 3 for the respective advertising tools.
3. Details on web analysis and advertising
On the basis of our legitimate interests in the analysis, improvement and economic operation of our offers within the meaning of Art. 6 Para. 1 lt. f. GDPR we use the following services:
Web analytics tools
(Google Analytics)
This website uses Google Analytics in the form of Universal Analytics for web analysis. This is a service provided by Google LLC 1600 Amphitheater Parkway Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies". The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers. It cannot be ruled out that data processing will take place outside the scope of EU law. Google has joined the Privacy Shield, so Google guarantees compliance with EU data protection standards. (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
For your protection, we have made settings that Google shortens the last part of the IP addresses of visitors to our website who have IP addresses from the EU or one of the contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. We have also concluded an order processing agreement with Google.
By means of an identification, e.g. when logging in to Google services, the data listed above can also be recorded and used across devices. This can e.g. It is recorded that you start your visit to us on a PC and continue it on a mobile device and the data from both devices can be linked. We have not activated the setting for using the user ID and therefore do not collect this data.
Google will use this information to evaluate your use of the website on our behalf, to compile reports on website activity for us, to form target groups with similar interests and to form other groups related to website use and internet use To provide us with services. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with other Google data. The storage of the analytics data is set to 50 months. The time is based on our interest in being able to make temporal comparisons with statistical data.
You can prevent the installation of cookies by setting your browser software accordingly.
Use of demographic characteristics with Google Analytics
Google offers the "demographic characteristics" function. This can be used to create compilations about website visitors with statements about age, gender and interests.
Google obtains this data from interest-based advertising and from visitor data from third-party providers. The data is not assigned to any particular person and is anonymized.
Your technical options for objection
If you do not want information about your website visit to be transmitted to Google Analytics, you have the option of installing a "deactivation add-on" for your browser. You can download this add-on here. We have provided a special deactivation option on our website, which is optimized for mobile browsers. If you do not wish to receive interest-based advertising, you can deactivate the use of cookies by Google for these purposes by visiting the page https://myaccount.google.com/intro. You can also deactivate the use of cookies by Google by downloading and installing the plug-in provided there via the following link: https://www.google.com/settings/ads/plugin?hl=de.
Alternatively or within browsers on mobile devices, you can use the following link to object to the use of Google Analytics. By activating the link, an opt-out cookie is set to prevent Google Analytics from collecting data on this website in the future. Please note that this opt-out cookie only works in this browser and only for this domain. As soon as you delete your cookies in this browser, you will have to click the link again: "Deactivate Google Analytics".
If you want to object to the creation of user profiles by Google, you must assert your rights there. You can find more information on the purpose and scope of data collection and its processing by Google LLC here https://www.google.de/intl/de/policies/privacy/.
If you do not wish to receive interest-based advertising, you can deactivate the use of cookies by Google for these purposes by visiting the page https://myaccount.google.com/intro. You can also deactivate the use of cookies by Google by downloading and installing the plug-in provided there via the following link: https://www.google.com/settings/ads/plugin?hl=de
4. Right of objection and revocation for usage profiles and cookies
Among other things, according to Art. 21 Para. 4 GDPR, you have the right to object to the creation of user profiles, especially if these are created for advertising purposes. You can revoke your consent to the setting and use of cookies at any time with effect for the future. Previous uses remain unaffected. We will then no longer evaluate any personal data. We have described how you can technically object to this in the information on data collection under the heading "Your technical options for objection".
If you have any questions about the technical options for objection listed above or our other protective measures, please do not hesitate to contact us. (See contact details below).
III. How do we protect your personal data?
1. General protective measures
The law requires companies to create an appropriate level of data protection. It is important to u.a. to reconcile the respective risk to the data, the probability of occurrence, the state of the art and the costs. We have provided appropriate technical and organizational measures to ensure the security of your data and its processing in accordance with legal requirements. If you have any security concerns when entering data or have any other questions or suggestions, simply contact our data protection officer. You will find the other contact details listed again at the end of this notice.
Your personal data will be transmitted securely using encryption when you place an order and when you register for your personal access. We use the SSL (Secure Socket Layer) coding system. We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification and distribution of your data by unauthorized persons. You should always keep your access information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.
2. Protection of your payment data
Your credit card data is entered and transmitted using a payment form from Concardis GmbH, Helfmann-Park 7, 65760 Eschborn (hereinafter referred to as "Concardis"). Concardis is a BAFIN-regulated payment institution and, among other things, a licensee of Mastercard and VISA. As a licensee of Mastercard and VISA, Concardis undergoes regular security checks. Concardis meets the so-called PCI security standards (Payment Card Industry Data Security Standard - a security standard that is supported by all major credit card organizations) so that you can pay securely online.
As a data subject, you can assert certain statutory rights.
1. Right to confirmation and information
According to Art. 15 GDPR you have the right to request confirmation from us as to whether personal data relating to you is being processed. In the event that we process such data, you have the right to free information about your stored data. The information includes information about
- the processing purposes;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration;
- the existence of a right to rectification or deletion of personal data concerning you or to restriction of processing by the controller or a right to object to this processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- if the personal data is not collected from the data subject: All available information about the origin of the data;
- the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate guarantees in connection with the transfer. If you have any questions about the collection, processing or use of your personal data, for information or to assert your other rights, simply contact us using the contact details provided at the end of this notice.
2. Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data relating to you is incorrect or incomplete. The person responsible must make the correction immediately.
3. Right of objection
You have the right to object at any time to the processing of your personal data that is based on Art. 6 Para. 1 lit. e or lit. f GDPR takes place; this also applies to profiling based on these provisions (see e.g. Term II. Number 2).
If there is an objection to data processing for direct marketing purposes (Art. 21 Para. 2 GDPR), this processing will be terminated as soon as possible after receipt of the objection (see I. Point 8 for further details.)
An objection to other processing operations (according to Art. 21 Para. 1 GDPR) based on Art. 6 Para. 1 lit. e or lit. f GDPR (e.g. identity and credit checks) can only be made for reasons that arise from your particular situation, whereby compelling overriding reasons worthy of protection can justify our further processing.
Granted consent can be revoked. (Contact details below) There are no special costs for you (apart from transmission costs according to the basic tariffs of your provider).
Objection and revocation of consent apply to the future. The legality of the data processing in the past remains unaffected.
Your objection to the identity and credit check may result in us generally only being able to offer you limited payment options or refusing to conclude a contract.
4. Right to erasure (right to be forgotten)
a) Requirements for deletion
You have the right to request the deletion of your personal data. Please note that a right to immediate deletion (Art. 17 GDPR) ("right to be forgotten") only exists if one of the following reasons applies:
- The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You revoke your consent on which the processing was based in accordance with Art. 6 Para. 1 lt. a GDPR or Art. 9 Para. 2 lt. a GDPR and there is no other legal basis for the processing.
- You object to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing for direct marketing purposes in accordance with Art. 21 (2) GDPR.
- The personal data concerning you has been processed unlawfully.
- The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data relating to you has been collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.
b) Extended right to be forgotten
If we have made the personal data concerning you public and we are obliged to delete it in accordance with Art. 17 Para. 1 GDPR, we will take appropriate measures, taking into account the available technology and the implementation costs, including technical measures, to inform those responsible for data processing who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.
c) Exceptions to deletion
In addition to the aforementioned requirements, please note that the following exceptions can justify a rejection of your request for deletion:
The right to erasure does not exist if processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation that requires processing under the law of the Union or of the Member States to which the controller is subject, or to perform a task that is in the public interest or is carried out in the exercise of official authority that has been transferred to the controller;
- for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 lit. h and i and Art. 9 Para. 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
- to assert, exercise or defend legal claims.
5. Right to restriction of processing
You have the right to restrict processing if you dispute the accuracy of the personal data for a period that enables us to verify the accuracy of the personal data or if you refuse to delete it in the event of unlawful processing and instead restrict the use of personal data require. You also have this right if we no longer need the data, but you need this personal data to assert, exercise or defend legal claims. Finally, you can assert this right if you have objected to the processing in accordance with Art. 21 Para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing has been restricted, this data may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a member state. The possibility of continued storage remains unaffected. If the restriction of processing has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.
6. Right to data portability
You also have the right to data portability of the data you provide to us that we have processed on the basis of effective consent or the processing of which was necessary for the conclusion or fulfillment of an effective contract, in a "structured, common and machine-readable format" to you. You also have the right to request that the data be transferred directly to another controller, insofar as this is technically feasible.
The right only exists insofar as the rights and freedoms of other people are not affected.
7. Assertion of your rights
If you have any questions or to assert your rights, please contact our customer service (e.g. at info@tonsor.de).
You can also contact our data protection officer. He is responsible in the event of complaints. You can reach our data protection officer using the following contact details:
Email: andreas@tonsor.de
You also have a right to complain to the supervisory authority responsible for data protection if, in your opinion, we do not deal with your request adequately, among other things. (Without prejudice to any other administrative or judicial remedy). In particular in the Member State of your residence, your place of work or the place of the alleged infringement.
You may have given us your consent for advertising contact or certain data uses (e.g. for a newsletter or services as part of a customer login, etc.). If you have given us your consent, the consent texts are stored by us and can be accessed. Simply contact us to retrieve them: andreas@tonsor.de We will then send you the requested information by e-mail.
Gebrüder Tonsor OHG
Kantstraße 34 (Corner Wielandstraße)
10625 Berlin Charlottenburg
Phone: +49 30 312 50 91
Fax: +49 30 313 73 29
info@tonsor.de